Unguardable vulnerabilities
Published CVEs affecting Unguardable products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-4473
Critical · 9.8
CWE-89 Mar 20, 2026
itsourcecode Online Doctor Appointment System appointment_action.php sql injection
A vulnerability was detected in itsourcecode Online Doctor Appointment System 1.0. This issue affects some unknown processing of the file /admin/appointment_action.php. The manipulation of the argument appointment_id results in sql injection. The attack can be launched remotely. The exploit is now public and may be used.
CVE-2026-3981
Critical · 9.8
CWE-89 Mar 12, 2026
itsourcecode Online Doctor Appointment System doctor_action.php sql injection
A vulnerability was found in itsourcecode Online Doctor Appointment System 1.0. Affected is an unknown function of the file /admin/doctor_action.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
CVE-2026-3980
Critical · 9.8
CWE-74 Mar 12, 2026
itsourcecode Online Doctor Appointment System patient_action.php sql injection
A vulnerability has been found in itsourcecode Online Doctor Appointment System 1.0. This impacts an unknown function of the file /admin/patient_action.php. Such manipulation of the argument patient_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.